CVE-2026-76418High· 8.6▾ Abyssal⚠ Exploited in the wild0dayPoC availableA vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the…
▾ Abyssal zone — Critical with a public exploit or in-the-wild use
impact 47.3 · likelihood 0.2 · exploitation 25
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Exploit-prediction probability, daily snapshots since Nov 3.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Federal remediation due Nov 1, 2026
Last analysed / modified upstream
0.8%
Added to the CISA catalog on Oct 29, 2026. Federal remediation due Nov 1, 2026. View catalog ↗
A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to logic errors when secondary authentication is configured on a tunnel group. An attacker could exploit this vulnerability by sending a crafted request when connecting to the SSL remote access VPN. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.
secure_firewall_adaptive_security_appliance_asa_software 9.16.1secure_firewall_adaptive_security_appliance_asa_software 9.16.1.28secure_firewall_adaptive_security_appliance_asa_software 9.16.2secure_firewall_adaptive_security_appliance_asa_software 9.16.2.3secure_firewall_adaptive_security_appliance_asa_software 9.16.2.7secure_firewall_adaptive_security_appliance_asa_software 9.16.2.11secure_firewall_adaptive_security_appliance_asa_software 9.16.2.13secure_firewall_adaptive_security_appliance_asa_software 9.16.2.14secure_firewall_adaptive_security_appliance_asa_software 9.16.3.3secure_firewall_adaptive_security_appliance_asa_software 9.16.3secure_firewall_adaptive_security_appliance_asa_software 9.16.3.14secure_firewall_adaptive_security_appliance_asa_software 9.18.1secure_firewall_adaptive_security_appliance_asa_software 9.16.3.15secure_firewall_adaptive_security_appliance_asa_software 9.18.1.3secure_firewall_adaptive_security_appliance_asa_software 9.18.2secure_firewall_adaptive_security_appliance_asa_software 9.16.3.19secure_firewall_adaptive_security_appliance_asa_software 9.16.3.23secure_firewall_adaptive_security_appliance_asa_software 9.18.2.5secure_firewall_adaptive_security_appliance_asa_software 9.16.4secure_firewall_adaptive_security_appliance_asa_software 9.18.2.7secure_firewall_adaptive_security_appliance_asa_software 9.19.1secure_firewall_adaptive_security_appliance_asa_software 9.16.4.9secure_firewall_adaptive_security_appliance_asa_software 9.18.2.8secure_firewall_adaptive_security_appliance_asa_software 9.16.4.14secure_firewall_adaptive_security_appliance_asa_software 9.18.3secure_firewall_adaptive_security_appliance_asa_software 9.19.1.5secure_firewall_adaptive_security_appliance_asa_software 9.16.4.18secure_firewall_adaptive_security_appliance_asa_software 9.19.1.9secure_firewall_adaptive_security_appliance_asa_software 9.18.3.39secure_firewall_adaptive_security_appliance_asa_software 9.16.4.19secure_firewall_adaptive_security_appliance_asa_software 9.19.1.12secure_firewall_adaptive_security_appliance_asa_software 9.18.3.46secure_firewall_adaptive_security_appliance_asa_software 9.16.4.27secure_firewall_adaptive_security_appliance_asa_software 9.19.1.18secure_firewall_adaptive_security_appliance_asa_software 9.18.3.53secure_firewall_adaptive_security_appliance_asa_software 9.18.3.55secure_firewall_adaptive_security_appliance_asa_software 9.16.4.38secure_firewall_adaptive_security_appliance_asa_software 9.16.4.39secure_firewall_adaptive_security_appliance_asa_software 9.18.3.56secure_firewall_adaptive_security_appliance_asa_software 9.20.1secure_firewall_adaptive_security_appliance_asa_software 9.16.4.42secure_firewall_adaptive_security_appliance_asa_software 9.19.1.22secure_firewall_adaptive_security_appliance_asa_software 9.18.4secure_firewall_adaptive_security_appliance_asa_software 9.20.1.5secure_firewall_adaptive_security_appliance_asa_software 9.18.4.5secure_firewall_adaptive_security_appliance_asa_software 9.19.1.24secure_firewall_adaptive_security_appliance_asa_software 9.16.4.48secure_firewall_adaptive_security_appliance_asa_software 9.18.4.8secure_firewall_adaptive_security_appliance_asa_software 9.20.2secure_firewall_adaptive_security_appliance_asa_software 9.19.1.27Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-76519Critical· 9.8A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. This vulnerability is due to i…
CVE-2026-76504Critical· 9.8A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user. This vulnerability is …
CVE-2026-76460Critical· 10.0A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication. This vulnerability is due to insufficient authentication control on an API endpoint
CVE-2026-20329Critical· 9.9As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software en…
CVE-2026-20336High· 8.8As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software en…
CVE-2026-20333High· 8.8As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software en…